jwt-cracker vs Plainsea Agentic Penetration Testing Platform (2026)